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ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 09-20-2012 BY 60324/UC/ba¥/saB/ , as 



FEDERAL BUREAU OF INVESTIGATION 

H 


Precedence: ROUTINE Date: 2/19/1998 

To: Director, FBI Attn: Acting Unit Ch ief 


From: WFO 



Title: SOLAR SUNRISE; 

CITAC MATTERS; 
00: HQ 


b6 
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Synopsis: Following is the status of WFO's involvement in this 

investigation as of 2/19/98. 

Reference: EC dated 2/17/98 to Houston Division. 

Details: 


288-WF-211047 


]U.S. NAVY - VICTIM; OO: WFO* 


SA 


is coordinating all investigative 


activity with Agents of the Naval Criminal Investigative Service 
(NCIS) based in both Washington, D.C. and Jacksonville, Florida. 
Evidence obtained from subject's University of Northern Florida 
(UNF) account has disclosed continuing access to that account 
fro m an IBM.NET connection. The Trap & Trace/pen register order 
for | |is being submitted this evening to the magistrate. Or der 


requires \_ 


_[ Resul ts are anticipated to support a subsequent 2703 

(d) order to □□ for | 1 The subj ect's 

current whereabouts and employment are known. Coordination with 
the NCIS Agents will c ontinue. T he installati on of the 
monitoring software at I Iwas initiated I 1 by 


| WFO is 

contacting Georgetown University, University of Virginia, and 
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FEDERAL BUREAU OF INVESTIGATION 

To: WMFO From: WMFO 
Re: 66-, 12/01/1995 

Georgia State University, and the original ISP victim/complainant 
in Lawton, OK. 

288-HQ-1242560 "SOLAR SUNRISE: CITAC MATTERS: 00: HQ" 

Optical disks received from H ouston. Copies will be 
made ASAP for AF, Navy, DISA, and I I Contact has been made 
with IBM network management and IBM is trace routing Israeli 
network leg. Should know soon of monitoring ability from within 
US of overseas leased nets. Referral/consult 

Analysis performed for three compromised systems: (1) 
Univ. California, Berkeley, (2) Andrews AFB, (3) US Naval 
Academy. To date, nothing significant has been identified in the 
most recent JID data collected for the past day or so. Observed 
two suspicious sites (netgate.saes.com and netdex.com). WFO has 
not confirmed the nexus on these sites. 


Gospelcom.net not contacted due to N CIC checks be 

Thegospel.com does b7c 


revealing 

not answer phone, nor do they call back when message left. Will 
continue to try to contact. Slip-stream.net SYSOP did not see 
anything unusual. They have been hacked before and do not 
consider this out of the norm b3 

OTHER Sealed pursuant to court order 

_ On 02/13/98, Court Order served on| | 


] Second order will 


Second 2703 (b) order provided to I 
provide additional information. 

FERMI Labs and Oakridge National Labs report no 
intrusions at their sites. All traffic to/from labs is 
legitimate and explainable. No known connection to this case. 

No further information from DISA. 

VICTIM; 00: WFO" 


288-WF-NEW 


sa[ 


assistance of the 


[ 


1 is addressing this matter with th e 


]and WFO CART. 


Subject's home was consensually searched for computer and 
computer media the evening of 2/17/98. Newark Division CART 


r 


Copy will be provided 


bo 
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Referral/Consult 
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FEDERAL BUREAU OF INVESTIGATION 

To: WMFO From: WMFO 

RS: 66 -, 12/01/1995 < Referral/Consult 

to I I ASAP. Subject provided detailed interview to both FBI and 

I I Agents. Gave no indication he was part of ongoing 
investigation 288-HQ-1242560. A review of his system is under 
way. 
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